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Abstract 



Finding the stable models of a knowledge base is a significant computational problem 
in artificial intelligence. This task is at the computational heart of truth maintenance 
systems, autoepistemic logic, and default logic. Unfortunately, it is NP-hard. In this 
paper we present a hierarchy of classes of knowledge bases, Sli,Sl2, with the following 
properties: first, Sli is the class of all stratified knowledge bases; second, if a knowledge 
base IT is in Sl^, then IT has at most k stable models, and all of them may be found in time 
O(lnk), where / is the length of the knowledge base and n the number of atoms in IT; third, 
for an arbitrary knowledge base IT, we can find the minimum k such that IT belongs to Sl^ 
in time polynomial in the size of IT; and, last, where K, is the class of all knowledge bases, 
it is the case that [J^L^i = IC, that is, every knowledge base belongs to some class in the 
hierarchy. 

1. Introduction 

The task of computing the stable models of a knowledge base lies at the heart of three of 
the fundamental systems in Artificial Intelligence (AI): truth maintenance systems (TMSs), 
default logic, and autoepistemic logic. Yet, this task is intractable (Elkan, 1990; Kautz & 
Selman, 1991; Marek & Truszczyriski, 1991). In this paper, we introduce a hierarchy of 
classes of knowledge bases which achieves this task in polynomial time. Membership in a 
certain class in the hierarchy is testable in polynomial time. Hence, given a knowledge base, 
the cost of computing its stable models can be bounded prior to the actual computation (if 
the algorithms on which this hierarchy is based are used). 

First, let us elaborate the relevance of computing stable models to AI tasks. We define 
a knowledge base to be a set of rules of the form 



where C, all As, and all Bs are atoms in some propositional language. Substantial efforts to 
give a meaning, or semantics, to a knowledge base have been made in the logic programming 
community (Przymusinska & Przymusinski, 1990). One of the most successful semantics for 
knowledge bases is stable model semantics (Bidoit & Froidevaux, 1987; Gelfond & Lifschitz, 
1988; Fine, 1989), which associates any knowledge base with a (possibly empty) set of 
models called stable models. Intuitively, each stable model represents a set of coherent 
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conclusions one might deduce from the knowledge base. It turns out that stable models 
play a central role in some major deductive systems in AI. 1 

1.1 Stable Models and TMSs 

TMSs (Doyle, 1979) are inference systems for nonmonotonic reasoning with default as- 
sumptions. The TMS manages a set of nodes and a set of justifications, where each node 
represents a piece of information and the justifications are rules that state the dependencies 
between the nodes. The TMS computes a grounded set of nodes and assigns this set to be 
the information believed to be true at a given point in time. Intuitively, a set of believed 
nodes is grounded if it satisfies all the rules, but no node is believed true solely on the basis 
of a circular chain of justifications. Elkan (1990) pointed out that the nodes of a TMS 
can be viewed as propositional atoms, and the set of its justifications as a knowledge base. 
He showed that the task of computing grounded interpretations for a set of TMS justifica- 
tions corresponds exactly to the task of computing the stable models of the knowledge base 
represented by the set of TMS justifications. 

1.2 Stable Models and Autoepistemic Logic 

Autoepistemic logic was invented by Moore (1985) in order to formalize the process of an 
agent reasoning about its own beliefs. The language of autoepistemic logic is a propositional 
language augmented by a modal operator L. Given a theory (a set of formulas) T in 
autoepistemic logic, a theory E is called a stable expansion of T iff 

E = (T{J{LF\F e E}\J{->LF\F £ E})* 

where F* denotes the logical closure of T. We will now restrict ourselves to a subset of 
autoepistemic logic in which each formula is of the form 

A\ A ... A A m A -iLi?i A ... A ~^LB n — >C (2) 

where C, each of the As, and each of the Bs are propositional atoms. We call this subset 
the class of autoepistemic programs. Every autoepistemic program T can be translated into 
a knowledge base Tlx by representing the formula (2) as the knowledge base rule (1). Elkan 
(1990) has shown that M is a stable model of Tlx iff there is an expansion E of T such 
that M is the set of all positive atoms in E. Thus, algorithms for computing stable models 
may be used in computing expansions of autoepistemic programs. The relationship between 
stable model semantics and autoepistemic logic has also been explored by Gelfond (1987) 
and Gelfond and Lifschitz (1988, 1991). 

1.3 Stable Models and Default Logic 

Default logic is a formalism developed by Reiter (1980) for reasoning with default assump- 
tions. A default theory can be viewed as a set of defaults, and a default is defined as an 
expression of the form 

a : /3i, ...,(3 n 



1. In logic programming terminology, the knowledge bases discussed in this paper are called normal logic 
programs. 
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where a, 7, and (3i, ...,fi n are formulas in some first-order language. According to Reiter, E 
is an extension for a default theory A iff E coincides with one of the minimal deductively 
closed sets of sentences E' satisfying the condition 2 that for any grounded instance of a 
default (3) from A, if a £ E' and -i/3i, ->(} n ^ E, then 7 £ E' . 

Now consider the subset of default theories that we call default programs. A default 
program is a set of defaults of the form 

Ai A ... A A m : -iB n ^ 

in which C , each of the As, and each of the Bs are atoms in a propositional language. 

Each default program A can be associated with a knowledge base IIa by replacing each 
default of the form (4) with the rule (1). 

Gelfond and Lifschitz (1991) have shown that the logical closure of a set of atoms E is 
an extension of A iff E is a stable model of IIa. Algorithms for computing stable models 
can thus be used in computing extensions of Reiter's default theories. 



* * * 



The paper is organized as follows. In the next section, we define our terminology. 
Section 3 presents two algorithms for computing all stable models of a knowledge base. 
The complexity of the first of these algorithms depends on the number of atoms appearing 
negatively in the knowledge base, while the complexity of the other algorithm depends 
on the number of rules having negative atoms in their bodies. In Section 4, we present 
the main algorithm of the paper, called algorithm ^4^45*. Algorithm AAS works from the 
bottom up on the superstructure of the dependency graph of the knowledge base and uses 
the two algorithms presented in Section 3 as subroutines. Section 5 explains how the AAS 
algorithm can be generalized to handle knowledge bases over a first-order language. Finally, 
in Sections 6 and 7, we discuss related work and make concluding remarks. 

2. Preliminary Definitions 

Recall that here a knowledge base is defined as a set of rules of the form 

C< — A 1 , ...,A m , not B 1 , not B n (5) 

where C, each of the As, and each of the Bs are propositional atoms. The expression to the 
left of < — is called the head of the rule, while the expression to the right of < — is called 
the body of the rule. Each of the As is said to appear positive in the rule, and, accordingly, 
each of the Bs is said to appear negative in the rule. Rule (5) is said to be about C . A rule 
with an empty body is called a unit rule. Sometimes we will treat a truth assignment (in 
other words, interpretation) in propositional logic as a set of atoms — the set of all atoms 
assigned true by the interpretation. Given an interpretation / and a set of atoms A, Ia 
denotes the projection of / over A. Given two interpretations, / and J, over sets of atoms 

2. Note the appearance of E in the condition. 
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A and B, respectively, the interpretation / + J is denned as follows: 

I(P) if P £ A \ B 

J(P) if P EB\A 

I(P) if P G Af] B and I(P) = ,J(P) 

undefined otherwise 

If I{P) = J(P) for every P £ Af] B, we say that / and J are consistent. 

A partial interpretation is a truth assignment over a subset of the atoms. Hence, a partial 
interpretation can be represented as a consistent set of literals: positive literals represent 
the atoms that are true, negative literals the atoms that are false, and the rest are unknown. 
A knowledge base will be called Horn if all its rules are Horn. A model for a theory (set 
of clauses) in propositional logic is a truth assignment that satisfies all the clauses. If one 
looks at a knowledge base as a theory in propositional logic, a Horn knowledge base has a 
unique minimal model (recall that a model to is minimal among a set of models M iff there 
is no model to' £ M such that to' C to). 

Given a knowledge base n and a set of atoms to, Gelfond and Lifschitz defined what is 
now called the Gelfond-Lifschitz (GL) transform of n w.r.t. to, which is a knowledge base 
n m obtained from II by deleting each rule that has a negative literal not P in its body with 
P £ to and deleting all negative literals in the bodies of the remaining rules. Note that Tl m 
is a Horn knowledge base. A model to is a stable model of a knowledge base n iff it is the 
unique minimal model of Tl m (Gelfond & Lifschitz, 1988). 

Example 2.1 Consider the following knowledge base Ho, which will be used as one of the 
canonical examples throughout this paper: 



warmJ)looded <— 


— mammal 


(6) 


livejonJand <— 


— mammal, not abl 


(7) 


female <— 


— mammal, not male 


(8) 


male <— 


— mammal, not female 


(9) 


mammal <— 


— dolphin 


(10) 


abl <— 


— dolphin 


(11) 


mammal <— 


— lion 


(12) 


lion <— 




(13) 



m = {lion, mammal, warm-blooded, UvejmJand, female} is a stable model of Ho- Indeed, 
Ho m (the GL transform of Hq w.r.t. to) is 



warmjblooded <— 


— mammal 


livejonJand <— 


— mammal 


female <— 


— mammal 


mammal <— 


— dolphin 


abl <— 


— dolphin 


mammal <— 


— lion 


lion <— 





I+J(P) 
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and m is a minimal model of IIo m • 

A set of atoms S satisfies the body of a rule 8 iff each atom that appears positive in the 
body of 8 is in S and each atom that appears negative in the body of 8 is not in S . A set 
of atoms S satisfies a rule iff either it does not satisfy its body, or it satisfies its body and 
the atom that appears in its head belongs to S . 

A proof of an atom is a sequence of rules from which the atom can be derived. Formally, 
we can recursively define when an atom P has a proof w.r.t. a set of atoms S and a 
knowledge base II: 

• If the unit rule P< — is in II, then P has a proof w.r.t. II and S . 

• If the rule P< — A\, A m , not B\, not B n is in II, and for every i = 1, n B{ is 
not in S , and for every i = 1, m A{ already has a proof w.r.t. II and S , then P has 
a proof w.r.t. II and S. 

Theorem 2.2 (Elkan, 1990; Ben-Eliyahu & Dechter, 1994) A set of atoms S is a stable 
model of a knowledge base II iff 

1. S satisfies each rule in II, and 

2. for each atom P in S , there is a proof of P w.r.t II and S . 
It is a simple matter to show that the following lemma is true. 

Lemma 2.3 Let II be a knowledge base, and let S be a set of atoms. Define: 

1. So = 0, and 

2. Si+i = Si{J{P\P< — Ai, A m , not B\, not B n is in II, 

all of the A's belong to Si and none of the B 's belong to S}. 

Then S is a stable model of II iff S = Uo°^'- 

Observe that although every stable model is a minimal model of the knowledge base 
viewed as a propositional theory, not every minimal model is a stable model. 

Example 2.4 Consider the knowledge base 

b < — not a 

Both {a} and {6} are minimal models of the knowledge base above, but only {6} is a stable 
model of this knowledge base. 

Note that a knowledge base may have one or more stable models, or no stable model at all. 
If a knowledge base has at least one stable model, we say that it is consistent. 

The dependency graph of a knowledge base II is a directed graph where each atom is a 
node and where there is a positive edge directed from P to Q iff there is a rule about Q 
in II in which P appears positive in the body. Accordingly, there is a negative edge from 
P to Q iff there is a rule about Q in which P appears negative in the body. Recall that a 
source of a directed graph is a node with no incoming edges, while a sink is a node with no 
outgoing edges. Given a directed graph G and a node s in G, the subgraph rooted by s is 
the subgraph of G having only nodes / such that there is a path directed from / to s in G. 
The children of s in G are all nodes / such that there is an arc directed from / to s in G. 
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Example 2.5 The dependency graph of IIo is shown in Figure 1. Negative edges are 
marked "not." The children of mammal are lion and dolphin. The subgraph rooted by 
onJand is the subgraph that include the nodes lion, mammal, dolphin, abl, and onJand. 



not 




Figure 1: The dependency graph of IIo 

A knowledge base is stratified iff we can assign each atom C a positive integer ic such 
that for every rule in the form of (5) above, for each of the As, %a < ic, an d for each of 
the Bs, %b < ic- It can be readily demonstrated that a knowledge base is stratified iff in 
its dependency graph there are no directed cycles going through negative edges. It is well 
known in the logic programming community that a stratified knowledge base has a unique 
stable model that can be found in linear time (Gelfond & Lifschitz, 1988; Apt, Blair, & 
Walker, 1988). 

Example 2.6 IIo is not a stratified knowledge base. The following knowledge base, IIi, is 
stratified (we can assign ab2 and penguin the number 1, and each of the other atoms the 
number 2): 

UvejonJand < — bird 

fly < — bird, not abl 
bird < — penguin 
abl < — penguin 
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The strongly connected components of a directed graph G make up a partition of its 
set of nodes such that, for each subset S in the partition and for each x,y £ S, there are 
directed paths from x to y and from y to x in G. The strongly connected components are 
identifiable in linear time (Tarjan, 1972). 




Figure 2: The super dependency graph of IIo 

The super dependency graph of a knowledge base II, denoted Gu, is the superstructure of 
the dependency graph of II. That is, Gu is a directed graph built by making each strongly 
connected component in the dependency graph of II into a node in Gu- An arc exists from 
a node s to a node v iff there is an arc from one of the atoms in s to one of the atoms in v 
in the dependency graph of II. Note that Gu is an acyclic graph. 

Example 2.7 The super dependency graph of IIo is shown in Figure 2. The nodes in the 
square are grouped into a single node. 

3. Two Algorithms for Computing Stable Models 

The main contribution of this paper is the presentation of an algorithm whose efficiency 
depends on the "distance" of the knowledge base from a stratified knowledge base. This 
distance will be measured precisely in Section 4. We will first describe two other algorithms 
for computing stable models. These two algorithms do not take into account the level of 
"stratifiability" of the knowledge base, that is, they will still work in exponential time for 
stratified knowledge bases. Our main algorithm will use these two algorithms as procedures. 
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Given a truth assignment for a knowledge base, we can verify in polynomial time whether 
it is a stable model by using Lemma 2.3. Therefore, a straightforward algorithm for comput- 
ing all stable models can simply check all possible truth assignments and determine whether 
each of them is a stable model. The time complexity of this straightforward procedure will 
be exponential in the number of atoms used in the knowledge base. Below, we present two 
algorithms that can often function more efficiently than the straightforward procedure. 

3.1 An Algorithm That Depends on the Number of Negative Atoms in the 
Knowledge Base 

Algorithm All-StableI (Figure 3) enables us to find all the stable models in time expo- 
nential in the number of the atoms that appear negative in the knowledge base. 

The algorithm follows from work on abductive extensions of logic programming in which 
stable models are characterized in terms of sets of hypotheses that can be drawn as addi- 
tional information (Eshghi & Kowalski, 1989; Dung, 1991; Kakas & Mancarella, 1991). 
This is done by making negative atoms abductible and by imposing appropriate denials 
and disjunctions as integrity constraints. The work of Eshghi and Kowalski (1989), Dung 
(1991), and Kakas and Mancarella (1991) implies the following. 

Theorem 3.1 Let II be a knowledge base, and let H be the set of atoms that appear negated 
in II. M is a stable model of II iff there is an interpretation I over H such that 

1. for every atom P £ H, if P E L, then P £ M' , 

2. M' and I are consistent, and 

3. M = I • M'. 

where M' is the unique stable model of Hi. 

Proof: The proof follows directly from the definition of stable models. Suppose M is a 
stable model of a knowledge base II, and let H be the set of atoms that appear negative in 
II. Then, by definition, M is a stable model of Hm- But note that Hm = Hm h - Hence, the 
conditions of Theorem 3.1 hold for M, taking M' = M and / = Mjj- Now, suppose II is 
a knowledge base and M = M' + /, where M' and / are as in Theorem 3.1. Observe that 
IIm = 11/ and, hence, since M' is a stable model of II/, M' is a stable model of Hm- We 
will show that M is a stable model of Hm- First, note that by condition 1, M C M' . Thus, 
M satisfies all the rules in Hm and, if an atom P has a proof w. r. t. M' and FIjv/, it has 
also a proof w. r. t. M and Hm- So, by Theorem 2.2, M is a stable model of Hm and, by 
definition, M is a stable model of II. □ 

Theorem 3.1 implies algorithm All-StableI (Figure 3), which computes all stable 
models of a knowledge base II. Hence, we have the following complexity analysis. 

Proposition 3.2 A knowledge base in which at most k atoms appear negated has at most 
2 k stable models and all of them can be found in time 0{nl2 k ), where I is the size of the 
knowledge base and n the number of atoms used in the knowledge base. 

Proof: Follows from the fact that computing 11/ and computing the unique stable model 
of a positive knowledge base is 0{nl). □ 
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All-StableI(II) 

Input: A knowledge base II. 

Output: The set of all stable models of II. 

1. M := 0; 

2. For each possible interpretation / for the set of all atoms that appear negative in II, 
do: 

(a) Compute M' , the unique stable model of II/; 

(b) If M' and / are consistent, let M := M {j{M' + I}; 

3. Return M; 



Figure 3: Algorithm All-StableI 

3.2 An Algorithm That Depends on the Number of Non-Horn Rules 

Algorithm All-Stable2 (Figure 4) depends on the number of rules in which there are 
negated atoms. It gets as input a knowledge base II, and, it outputs the set of all stable 
models of II. This algorithm is based upon the observation that a stable model can be 
built by attempting all possible means of satisfying the negated atoms in bodies of non- 
Horn rules. Two procedures are called by All-Stable2: Unitlnst, shown in Figure 5; and 
NegUnitlnst, shown in Figure 6. Procedure Unitlnst gets as input a knowledge base II and 
a partial interpretation to. Unitlnst looks recursively for unit rules in II. For each unit rule 
P< — , if P is assigned false in to, it follows that to cannot be a part of a model for II, and 
the procedure returns false. If P is not false in to, the procedure instantiates P to true in 
the interpretation to and deletes the positive appearances of P from the body of each rule. 
It also deletes from II all the rules about P and all the rules in which P appears negative. 

Procedure NegUnitlnst receives as input a knowledge base II, a partial interpretation 
to, and a set of atoms Neg. It first instantiates each atom in Neg to false and then updates 
the knowledge base to reflect this instantiation. All the instantiations are recorded in to. 
In case of a conflict, namely, where the procedure tries to instantiate to true an atom that 
is already set to false, the procedure returns false; otherwise, it returns true. 

Proposition 3.3 Algorithm All-Stable2 is correct, that is, to is a stable model of a 
knowledge base II iff it is generated by All-Stable2(II). 

Proof: Suppose to is a stable model of a knowledge base II. Then, by Theorem 2.2, every 
atom set to true in to has a proof w. r. t. to and II. Let S be the set of all non-Horn 
rules whose bodies are satisfied by to. Clearly, at some point this S is checked at step 3 of 
algorithm All-Stable2. When this happens, all atoms that have a proof w. r. t. to and 
n will be set to true by the procedure NegUnitlnst (as can be proved by induction on the 
length of the proof). Hence, to will be generated. 

Suppose to is generated by All-Stable2(H). Obviously, every rule in n is satisfied by 
to (step 3.c.ii), and every atom set to true by NegUnitlnst has a proof w. r. t. to and n 
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All-Stable2(11) 




Input: A knowledge base II. 




1 Intnilt' 1 HP Q£»1~ HT a cfa HP rnnnp k nf II 
V_/U_l[JU.l. _L lit: Ocl UI <Xll OldiUlc HlUtlt;lD UI ±1_ . 




1. M := 0; 




2. Let A be the set of all non-Horn rules in II. 




\ H cw P^r*n cn Kcoi~ ^ nf f\ c\c\' 
O . J. UI t;<xt,ll olIUocl O UI , tlU . 




1^1 i\ £> n — J a /"i / /-^ ic i Ti f h p Ki~iH"\7" riT c nin o t*ii p 
I al i V c(7 — i J / tl/t ± lo 111 lilt; UUtl V UI DUlllt; 1 Lilt; 


in TI- 

ill o J , 


(b) IT := II; to := 0; 




(c) 11 IN eg Umtlnst (II , JS eg, to), then 




i. For each P such that m[P] = null, let to 


[P] := false; 


ii. If to satisfies all the rules in II, then M : 


= MUW; 


4. EndFor; 




5. Return M; 





Figure 4: Algorithm All-Stable2 



UnitInst(II, to) 

Input: A knowledge base II and a partial interpretation to. 

Output: Updates to using the unit rules of II. Returns false if there is a conflict between 
a unit rule and the value assigned to some atom in to; otherwise, returns true . 

1. While II has unit rules, do: 

(a) Let P< — be a unit rule in II; 

(b) If m[P] = false, return false; 

(c) m[P] := true; 

(d) Erase P from the body of each rule in II; 

(e) Erase from II all rules about P; 

(f ) Erase from II all rules in which P appears negative; 

2. End While; 

3. Return true; 

Figure 5: Procedure Unitlnst 
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NegUmtInst(II, Neg, m) 

Input: A knowledge base II, a set of atoms Neg, and a partial interpretation m. 

Output: Updates m assuming the atoms in Neg are false. Returns false if inconsistency is 

detected; otherwise, returns true. 

1. For each atom P in Neg 

(a) m[P] := false; 

(b) Delete from the body of each rule in II each occurrence of not P; 

(c) Delete from II each rule in which P appears positive in the body; 

2. EndFor; 

3. Return UnitInst(II, to); 

Figure 6: Procedure NegUnitlnst 





lion 


dolphin 


abl 


mammal 


warm_b 


onJand 


male 


female 


51 


T 


F 


F 


T 


T 


T 


F 


T 


52 


T 


F 


F 


T 


T 


T 


T 


F 



Table 1: Models generated by Algorithm All-Stable2 



(as is readily observable from the way NegUnitlnst works). Hence, by Theorem 2.2, to is a 
stable model of II. □ 

Proposition 3.4 A knowledge base having c non-Horn rules has at most 2 C stable models 
and all of them can be found in time 0(nl2 c ), where I is the size of the knowledge base and 
n the number of atoms used in the knowledge base. 

Proof: Straightforward, by induction on c. □ 

Example 3.5 Suppose we call All-Stable2 with IIo as the input knowledge base. At 
step 2, A is the set of rules (7), (8), and (9). When subsets of A which include both rules 
(8) and (9) are considered at step 3, NegUnitlnst will return false because Unitlnst will 
detect inconsistency. When the subset containing both rules (7) and (8) is considered, the 
stable model SI of Table 1 will be generated. When the subset containing both rules (7) 
and (9) is considered, the stable model S2 of Table 1 will be generated. When all the other 
subsets that do not contain both rules (8) and (9) are tested at step 3, the to generated will 
not satisfy all the rules in II and, hence, will not appear in the output. 

Algorithms All-StableI and All-Stable2 do not take into account the structure 
of the knowledge base. For example, they are not polynomial for the class of stratified 
knowledge bases. We present next an algorithm that exploits the structure of the knowledge 
base. 
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4. A Hierarchy of Tractable Subsets Based on the Level of Stratifiability 
of the Knowledge Base 

Algorithm Acyclic- All-Stable (AAS) in Figure 7 exploits the structure of the knowledge 
base as it is reflected in the super dependency graph of the knowledge base. It computes all 
stable models while traversing the super dependency graph from the bottom up, using the 
algorithms for computing stable models presented in the previous section as subroutines. 

Let IT be a knowledge base. With each node s in Gu (the super dependency graph of 
IT), we associate IT S , A s , and M s . IT S is the subset of IT containing all the rules about the 
atoms in s, A s is the set of all atoms in the subgraph of Gu rooted by s, and M s is the set of 
stable models associated with the subset of the knowledge base IT which contains only rules 
about atoms in A s . Initially, M s is empty for every s. The algorithm traverses Gu from 
the bottom up. When at a node s, it first combines all the submodels of the children of s 
into a single set of models M c ^ s y If s is a source, then M c ^ is set to {0} 3 . Next, for each 
model to in M c ( s y AAS converts II S to a knowledge base II Sm using the GL transform and 
other transformations that depend on the atoms in to; then, it finds all the stable models 
of II Sm and combines them with to. The set M s is obtained by repeating this operation for 
each to in M c ^ s y AAS uses the procedure CartesProd (Figure 8), which receives as input 
several sets of models and returns the consistent portion of their Cartesian product. If one 
of the sets of models which CartesProd gets as input is the empty set, CartesProd will 
output an empty set of models. The procedure Convert gets as input a knowledge base II, 
a model to, and a set of atoms s, and performs the following: for each atom P in to, each 
positive occurrence of P is deleted from the body of each rule in II; for each rule in II, if 
not P is in the body of the rule and P £ to, then the rule is deleted from II; if not P is 
in the body of a rule and P to, then, if P s, not P is deleted from that body. The 
procedure All-Stable called by AAS may be one of the procedures previously presented 
(All-StableI or All-Stable2) or it may be any other procedure that generates all stable 
models. 

Example 4.1 Suppose AAS is called to compute the stable models of IIo. Suppose further 
that the algorithm traverses the super dependency graph in Figure 2 in the order {lion, 
dolphin, mammal, abl, onJand, warm-blooded, female-male} (recall that all the nodes in- 
side the square make up one node that we are calling female-male or, for short, FM). 
After visiting all the nodes except the last, we have Mu on = {{lion}}, Mdoiphin = {0} 5 
M mamma i = {{lion, mammal}}, M onJand = {{lion, mammal, onl and}}, M warm _ h i ooded = 
{{lion, mammal, warm-blooded}}. When visiting the node FM, we have after step l.c that 
M c (fm) = ^mammal- So step l.d loops only once, for to = {lion, mammal}. Recall that 
II_fm is the knowledge base 

female < — mammal, not male 
male < — mammal, not female 



3. Note the difference between {0}, which is a set of one model - the model that assigns false to all the 
atoms, and 0, which is a set that contains no models. 
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Acyclic- All- Stable(II) 

Input: A knowledge base II. 

Output: The set of all stable models of II. 

1. Traverse Gu from the bottom up. For each node s, do: 

(a) M s := 0; 

(b) Let s\,...,Sj be the children of s. 

(c) If j = 0, thenM c(s) := {0}; 

else M c(s) := CartesProd({M Sl , M Sj }); 

(d) For each m £ M c ( s ), do: 

i. II Sm := Convert(II s ,m,s); 

ii. M := All- Stab LE(n Sm ); 

iii. If M ^ 0, then M s := M s lJCartesProd({{m}, M}); 

2. Output CartesProd({M Sl , M Sk }), where si,...,Sk are the sinks of Gn- 



Figure 7: Algorithm Acyclic-All-Stable (AAS) 



CartesProd(A4) 

Input: A set of sets of models Ai. 

Output: A set of models which is the consistent portion of the Cartesian product of the 
sets in Ai. 

1. If Ai has a single element {E}, then return E; 

2. M := 0; 

3. Let M 1 £ Ai; 

4. D := CartesProd(A4 \ {M 7 }); 

5. For each c? in D, do: 

(a) For each m in M', do: 

If m and c? are consistent, then M := M(J{m + d}; 

(b) EndFor; 

6. EndFor; 

7. Return M; 

Figure 8: Procedure CartesProd 
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After executing step l.d.i, we have Hfm, 

female 
male 

The above knowledge base has two stable models: {female} and {male}. The Cartesian 
product of the above set with {lion, mammal} yields Mfm = {{lion, mammal, female}, 
{lion, mammal, male}}. At step 2, the Cartesian product of M warm _f > i 00( i e d, M on j an( i, and 
Mfm is taken. Thus, the algorithm outputs {{lion, mammal, onJand, warm-blooded, female}, 
{lion, mammal, onJand, warm-blooded, male}}, and these are indeed the two stable models 
of n . Note that algorithm AAS is more efficient than either ALL-STABLEf or All-Stable2 
on the knowledge base IIo. 

Theorem 4.2 Algorithm AAS is correct, that is, m is a stable model of a knowledge base 
IT iff m is generated by AAS when applied to II. 

Proof: Let sq,s\, ...,s n be the ordering of the nodes of the super dependency graph by 
which the algorithm is executed. We can show by induction on i that AAS, when at node 
Si, generates all and only the stable models of the portion of the knowledge base composed 
of rules that only use atoms from A St . 

case i = 0: In this case, at step l.d.ii of AAS, II Sm = ll s ; thus, the claim follows from the 
correctness of the algorithm All-Stable called in step l.d.ii. 

case i > 0: Showing that every model generated is stable is straightforward, by the induc- 
tion hypothesis and Theorem 2.2. The other direction is: suppose m is a stable model 
of II S ; show that m is generated. Clearly, for each child s of Si, the projection of m 
onto A s is a stable model of the part of the knowledge base that uses only atoms from 
A s . By induction, m c , which is the projection of m onto the union of A s for every 
child s of Si, must belong to M c ( Sj ) computed at step I.e. Therefore, to show that m 
is generated, we need only show that m' = m — m c is a stable model of II Sj . This 
is easily done using Theorem 2.2. 

□ 

We will now analyze the complexity of AAS. First, given a knowledge base IT and a 
set of atoms s, we define IT S to be the knowledge base obtained from IT by deleting each 
negative occurrence of an atom that does not belong to s from the body of every rule. 
For example, if L 7 = {a< — not b, c< — not d, a} and s = {b}, then ll s = {a< — not b, c< — a}. 
While visiting a node s during the execution of AAS, we have to compute at step l.d.ii all 
stable models of some knowledge base II Sm . Using either All-StableI or All-Stable2, 
the estimated time required to find all stable models of II Sm is shorter than or equal to the 
time required to find all stable models of ll s . This occurs because the number of negative 
atoms and the number of rules with negative atoms in their bodies in lT s is higher than 
or equal to the number of negative atoms and the number of rules with negative atoms in 
their bodies in II Sm , regardless of what m is. Thus, if IT S is a Horn knowledge base, we can 
find the stable model of IT S , and hence of II Sm , in polynomial time, no matter what m is. 



set to 



not male 
not female 
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If II S is not positive, then we can find all stable models of ll s , and hence of II Sm , in time 
min(/ra * 2 fc , In * 2 C ), where / is the length of II S , n the number of atoms used in II S , c the 
number of rules in ll s that contain negative atoms, and k the number of atoms that appear 
negatively in II S . 

Then, with each knowledge base II, we associate a number tu as follows. Associate a 
number v s with every node in Gu- Lf FI S is a Horn knowledge base, then v s is 1; else, v s is 
mira(2 fc ,2 c ), where c is the number of rules in ll s that contain negative atoms from s, and 
k is the number of atoms from s that appear negatively in II S . Now associate a number t s 
with every node s. If s is a leaf node, then t s = v s . If s has children si, ...,Sj in Gu, then 
t s = v s * t Sl * ... * t Sj . Define tu to be t Sl * ... * t Sk , where si, Sj~ are all the sink nodes in 
Gu- 

Definition 4.3 A knowledge base II belongs to Oj if tu = j- 

Theorem 4.4 If a knowledge base belongs to Oj for some j , then it has at most j stable 
models that can be computed in time O(lnj). 

Proof: By induction on j. The dependency graph and the super dependency graph are 
both built in time linear in the size of the knowledge base. So we may only consider the 
time it takes to compute all stable models with the super dependency graph given. 

case j = 1: II £ fii means that for every node s in Gu, II S is a Horn knowledge base. In 
other words, n is stratified, and therefore it has exactly one stable model. There are 
at most n nodes in the graph. At each node, the loop in step l.d is executed at most 
once, because at most one model is generated at every node. Procedure Convert runs 
in time 0(1 s ), where l s is the length of II S (we assume that m is stored in an array 
where the access to each atom is in constant time). Since, for every node s, 1T S is a 
Horn knowledge base, H Sm is computed in time 0{l s n). Thus, the overall complexity 
is 0(ln). 

case j > 1: By induction on n, the number of nodes in the super dependency graph of n. 

case n = 1: Let s be the single node in Gu- Thus, j = v s . Using the algorithms from 
Section 3, all stable models of n = n s can be found in time 0(lnv s ), and II has 
at most v s models. 

case n > 1: Assume without loss of generality that Gu has a single sink s (to get a 
single sink, we can add to the program the rule P< — si, where si, ...,Sk are 
all the sinks and P is a new atom). Let ci, ...,Ck be the children of s. For each 
child Ci, II(cj-), the part of the knowledge base which corresponds to the subgraph 
rooted by c 4 -, must belong to fi^ for some t{ < j. By induction on n, for each 
child node c 4 -, all stable models of n(c 8 ) can be computed in time O(lnti), and 
II(cj-) has at most t{ stable models. Now let us observe what happens when AAS 
is visiting node s. First, the Cartesian product of all the models computed at the 
child nodes is taken. This is executed in time 0{n*t\ * ... and yields at most 
t\ * ... * tk models in M c ^ s y For every m £ M c ( s ), we call Convert (0{ln)) and 
compute all the stable models of LI Sm (0{lnv s )). We then combine them with m 
using CartesProd (0{nv s )). Thus, the overall complexity of computing M s , that 
is, of computing all the stable models of II, is 0{lnt\ * ... * tk * v s ) = O(lnj). 
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□ 

Note that all stratified knowledge bases belong to fii , and the more that any knowledge 
base looks stratified, the more efficient algorithm AAS will be. 

Given a knowledge base IT, it is easy to find the minimum j such that IT belongs to Oj. 
This follows because building Gu and finding c and k for every node in Gu are polynomial- 
time tasks. Hence, 

Theorem 4.5 Given a knowledge base II, we can find the minimum j such that II belongs 
to Oj in polynomial time. 

Example 4.6 For all the nodes s in Gu except FM, v s = l. vfm = 2. Thus, IIo G f^2- III 
is a stratified knowledge base and therefore belongs to S7i . 





not 




[ female ) 


not 





warm_blood 




Figure 9: The super dependency graph of IloUni 

The next example shows that step 5 of procedure CartesProd is necessary. 
Example 4.7 Consider knowledge base II4: 



a <— 


— not b 


b <- 


— not a 


c <— 


— a 


d <- 


- b 


e <— 


— c,d 


f - 


— c 
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The super dependency graph of II4 is shown in Figure 10. During the run of algorithm AAS, 
Mat, (the set of models computed at the node {a, b}) is set to {{a, -16}, {->a, b}}. When AAS 
visits nodes c and d, we get M c = {{a, -16, c}, {-ia, &}}, M,i = {{-ia,b,d}, {a, -16}}. When 
AAS visits node e, CartesProd is called on the input {M c , Mj}, yielding the output M e = 
{{a, -16, c}, {-ia,b,d}}. Note that CartesProd does not output any model in which both c 
and d are true, because the models {a, -ib, c} and {->a, b, d} are inconsistent and CartesProd 
checks for consistency in step 5. When visiting node /, we get Mf = {{a, -ib, c, /}, {->a, b}}. 
AAS then returns CartesProd({M e , My}), which is {{a, -16, c, /}, {->a, b, d}}. 

The next example demonstrates that some models generated at some nodes of the su- 
per dependency graph during the run of AAS may later be deleted, since they cannot be 
completed to a stable model of the whole knowledge base. 

Example 4.8 Consider knowledge base II2 : 

a < — not b 
b < — not a 
c < — a, not c 

The dependency graph and the super dependency graph of II2 are shown in Figure 11. 
During the run of algorithm AAS, M a & (the set of models computed at the node {a, b}) is 
set to {{a}, {b}}. However, only {&} is a stable model of II2 . 

Despite the deficiency illustrated in Example 4.8, algorithm AAS does have desirable 
features. First, AAS enables us to compute stable models in a modular fashion. We can use 
Gu as a structure in which to store the stable models. Once the knowledge base is changed, 
we need to resume computation only at the nodes affected by the change. For example, 
suppose that after computing the stable models of the knowledge base IIo, we add to llo 
the knowledge base 111 of Example 2.6, which gives us a new knowledge base, II 3 = IloUni. 
The super dependency graph of the new knowledge base II 3 is shown in Figure 9. Now we 
need only to compute the stable models at the nodes penguin, bird, ab2, fly, and onJand 
and then to combine the models generated at the sinks. We do not have to re-compute the 
stable models at all the other nodes as well. 

Second, in using the AAS algorithm, we do not always have to compute all stable models 
up to the root node. If we are queried about an atom that is somewhere in the middle of 
the graph, it is often enough to compute only the models of the subgraph rooted by the 
node that represents this atom. For example, suppose we are given the knowledge base 
II2 and asked if mammal is true in every stable model of II2 . We can run AAS for the 
nodes dolphin, lion, and mammal — and then stop. If mammal is true in all the stable 
models computed at the node mammal (i.e., in all the models in M mamma i), we answer 
"yes", otherwise, we must continue the computation. 

Third, the AAS algorithm is useful in computing the labeling of a TMS subject to 
nogoods. A set of nodes of a TMS can be declared nogood, which means that all acceptable 
labeling should assign false to at least one node in the nogood set. 4 In stable models 
terminology, this means that when handling nogoods, we look for stable models in which 

4. In logic programming terminology nogoods are simply integrity constraints. 
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at least one atom from a nogood is false. A straightforward approach would be to first 
compute all the stable models and then choose only the ones that comply with the nogood 
constraints. But since the AAS algorithm is modular and works from the bottom up, 
in many cases it can prevent the generation of unwanted stable models at an early stage. 
During the computation, we can exclude the submodels that do not comply with the nogood 
constraints and erase these submodels from M s once we are at a node s in the super 
dependency graph such that A s includes all the members of a certain nogood. 

5. Computing Stable Models of First-Order Knowledge Bases 

In this section, we show how we can generalize algorithm AAS so that it can find all stable 
models of a knowledge base over a first-order language with no function symbols. The new 
algorithm will be called First- Acyclic-All-Stable (FAAS). 

We will now refer to a knowledge base as a set of rules of the form 

C< — A 1 ,A 2 ,...,A m ,notB 1 ,...,notB n (14) 

where all As, Bs, and C are atoms in a first-order language with no function symbols. The 
definitions of head, body, and positive and negative appearances of an atom are the same 
as in the propositional case. In the expression p(X\, ...,X n ), p is called a predicate name. 

As in the propositional case, every knowledge base II is associated with a directed graph 
called the dependency graph of II, in which (a) each predicate name in II is a node, (b) 
there is a positive arc directed from a node p to a node q iff there is a rule in II in which 
p is a predicate name in one of the A 4 -s and q is a predicate name in the head, and (c) 
there is a negative arc directed from a node p to a node q iff there is a rule in II in which 
p is a predicate name in one of the _B 8 s and q is a predicate name in the head. The super 
dependency graph, Gu, is defined in an analogous manner. We define a stratified knowledge 
base to be a knowledge base in which there are no cycles through the negative edges in the 
dependency graph of the knowledge base. 

A knowledge base will be called safe iff each of its rules is safe. A rule is safe iff all the 
variables appearing in the head of the rule or in predicates appearing negative in the rule 
also appear in positive predicates in the body of the rule. In this section, we assume that 
knowledge bases are safe. The Herbrand base of a knowledge base is the set of all atoms 
constructed using predicate names and constants from the knowledge base. The set of 
ground instances of a rule is the set of rules obtained by consistently substituting variables 
from the rule with constants that appear in the knowledge base in all possible ways. The 
ground instance of a knowledge base is the union of all ground instances of its rules. Note 
that the ground instance of a first-order knowledge base can be viewed as a propositional 
knowledge base. 

A model for a knowledge base is a subset M of the knowledge base's Herbrand base. 
This subset has the property that for every rule in the grounded knowledge base, if all the 
atoms that appear positive in the body of the rule belong to M and all the atoms that 
appear negative in the body of the rule do not belong to M, then the atom in the head of 
the rule belongs to M. A stable model for a first-order knowledge base II is a Herbrand 
model of n, which is also a stable model of the grounded version of II. 
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First- Acyclic- All- Stable(II) 
Input: A first-order knowledge base IT. 
Output: All the stable models of IT. 



1 



Traverse Gu from the bottom up. For each node s, do: 



(a) M s := 0; 

(b) Fet s\,...,Sj be the children of s; 

(c) M c(s) := CartesProd({M Sl ,...,M s .}); 

(d) For each m £ M c ^ do 



M s := M s Uall-stable(n s U{^ < — \P G m}) 



2 



Output CartesProd({M Sl , M Sk }), where si,...,Sk are the sinks of Gu- 



Figure 12: Algorithm First- Acyclic-All-Stable (FAAS) 



We now present FAAS, an algorithm that computes all stable models of a first-order 
knowledge base. Fet II be a first-order knowledge base. As in the propositional case, with 
each node s in Gu (the super dependency graph of II), we associate II S , A s , and M s . Tl s is 
the subset of II containing all the rules about predicates whose names are in s. A s is the 
set of all predicate names P that appear in the subgraph of Gu rooted by s. M s are the 
stable models associated with the sub-knowledge base of II that contains only rules about 
predicates whose names are in A s . Initially, M s is empty for every s. Algorithm FAAS 
traverses Gu from the bottom up. When at a node s, the algorithm first combines all the 
submodels of the children of s into a single set of models, M c ^ s y Then, for each model 
m in M c ( s ), it calls a procedure that finds all the stable models of II S union the set of all 
unit clauses P< — where P £ m. The procedure All-Stable called by FAAS can be any 
procedure that computes all the stable models of a first-order knowledge base. Because 
procedure All-Stable computes stable models for only parts of the knowledge base, it 
may take advantage of some fractions of the knowledge base being stratified or having any 
other property that simplifies computation of the stable models of a fraction. 

Theorem 5.1 Algorithm FAAS is correct, that is, m is a stable model of a knowledge base 
II iff m is one of the models in the output when applying FAAS to II. 

Proof: As the proof of Theorem 4.2. □ 

Note that the more that a knowledge base appears stratified, the more efficient algorithm 
FAAS becomes. 

Example 5.2 Consider knowledge base II5 : 



warmJ)looded(X) 
livejonJand(X) 
female(X) 



mammal(X) 
mammal(X), not abl(X) 
mammal(X), not male(X) 
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male(X) < — mammal(X),not female(X) 

mammal(X) < — dolphin(X) 

abl(X) < — dolphin(X) 

mammal(X) < — lion(X) 

dolphin( flipper) < — 



UvejonJand(X) < — bird(X) 

fly(X) < — bird(X),notab2(X) 
bird(X) < — penguin(X) 
ab2(X) < — penguin(X) 
bird(bigbird) < — 

The super dependency graph of TI5 , Gu 5 , is the same as the super dependency graph of 
the knowledge base TI2 (see Figure 9). Observe that when at node mammal, for example, 
in step l.d the algorithm looks for all stable models of the knowledge base II' = II mamma ; (J 
{< — dolphin( flipper)} , where II mamma ; ={mammal(X)< — dolphin(X), ■mammal(X)< — lion(X)}. 
II' is a stratified knowledge base that has a unique stable model that can be found efficiently. 
Hence, algorithm FAAS saves us from having to ground all the rules of the knowledge base 
before starting to calculate the models, and it can take advantage of parts of the knowledge 
base being stratified. 



6. Related Work 

In recent years, quite a few algorithms have been developed for reasoning with stable models. 
Nonetheless, as far as we know, the work presented here is original in the sense that it 
provides a partition of the set of all the knowledge bases into a hierarchy of tractable 
classes. The partition is based on the structure of the dependency graph. Intuitively, the 
task of computing all the stable models of a knowledge base using algorithm AAS becomes 
increasingly complex as the "distance" of the knowledge base from being stratified becomes 
larger. Next, we summarize the work that seems to us most relevant. 

Algorithm AAS is based on an idea that appears in the work of Lifschitz and Turner 
(1994), where they show that in many cases a logic program can be divided into two parts, 
such that one part, the "bottom" part, does not refer to the predicates defined in the "top" 
part. They then explain how the task of computing the stable models of a program can be 
simplified when the program is split into parts. Algorithm AAS, using the superstructure 
of the dependency graph, exploits a specific method for splitting the program. 

Bell et al. (1994) and Subrahmanian et al. (1995) implement linear and integer pro- 
gramming techniques in order to compute stable models (among other nonmonotonic log- 
ics). However, it is difficult to assess the merits of their approaches in terms of complexity. 
Ben-Eliyahu and Dechter (1991) illustrate how a knowledge base n can be translated into 
a propositional theory Tn such that each model of the latter corresponds to a stable model 
of the former. It follows from this that the problem of finding all the stable models of 
a knowledge base corresponds to the problem of finding all the models of a propositional 
theory. Satoh and Iwayama (1991) provide a nondeterministic procedure for computing 
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the stable models of logic programs with integrity constraints. Junker and Konolige (1990) 
present an algorithm for computing TMS' labels. Antoniou and Langetepe (1994) introduce 
a method for representing some classes of default theories as normal logic programs in such 
a way that SLDNF-resolution can be used to compute extensions. Pimentel and Cuadrado 
(1989) develop a label-propagation algorithm that uses data structures called compressible 
semantic trees in order to implement a TMS; their algorithm is based on stable model se- 
mantics. The algorithms developed by Marek and Truszczyhski (1993) for autoepistemic 
logic can also be adopted for computing stable models. The procedures by Marek and 
Truszczyhski (1993), Antoniou and Langetepe (1994), Pimentel and Cuadrado (1989), Ben- 
Eliyahu and Dechter (1991), Satoh and Iwayama (1991), Bell et al. (1994), Subrahmanian 
et al. (1995), and Junker and Konolige (1990) do not take advantage of the structure of 
the knowledge base as reflected in its dependency graph, and therefore are not efficient for 
stratified knowledge bases. 

Sacca and Zaniolo (1990) present a backtracking fixpoint algorithm for constructing one 
stable model of a first-order knowledge base. This algorithm is similar to algorithm All- 
Stable2 presented here in Section 3 but its complexity is worse than the complexity of 
All-Stable2. They show how the backtracking fixpoint algorithm can be modified to 
handle stratified knowledge bases in an efficient manner, but the algorithm needs further 
adjustments before it can deal efficiently with knowledge bases that are very close to being 
stratified. Leone et al. (1993) present an improved backtracking fixpoint algorithm for 
computing one stable model of a Datalog - ' program and discuss how the improved algorithm 
can be implemented. One of the procedures called by the improved algorithm is based on 
the backtracking fixpoint algorithm of Sacca and Zaniolo (1990). Like the backtracking 
fixpoint algorithm, the improved algorithm as is does not take advantage of the structure 
of the program, i.e., it is not efficient for programs that are close to being stratified. 

Several tractable subclasses for computing extensions of default theories (and, hence, 
computing stable models) are known (Kautz k Selman, 1991; Papadimitriou k Sideri, 
1994; Palopoli k Zaniolo, 1996; Dimopoulos k Magirou, 1994; Ben-Eliyahu k Dechter, 
1996). Some of these tractable subclasses are characterized using a graph that reflects 
dependencies in the program between atoms and rules. The algorithms presented in these 
papers are complete only for a subclass of all knowledge bases, however. Algorithms for 
computing extensions of stratified default theories or extensions of default theories that 
have no odd cycles (in some precise sense) are given by Papadimitriou and Sideri (1994) 
and Cholewihski (1995a, 1995b). 

Algorithms for handling a TMS with nogoods have been developed in the Al commu- 
nity by Doyle (1979) and Charniak et al. (1980). But, as Elkan (1990) points out, these 
algorithms are not always faithful to the semantics of the TMS and their complexities have 
not been analyzed. Dechter and Dechter (1994) provide algorithms for manipulating a TMS 
when it is represented as a constraint network. The efficiency of their algorithms depends 
on the structure of the constraint network representing the TMS, and the structure they 
employ differs from the dependency graph of the knowledge base. 
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7. Conclusion 

The task of computing stable models is at the heart of several systems central to AI, 
including TMSs, autoepistemic logic, and default logic. This task has been shown to be 
NP-hard. In this paper, we present a partition of the set of all knowledge bases to classes 
0,1,0,2, such that if a knowledge base II is in Ok, then II has at most k stable models, 
and they may all be found in time O(lnk), where / is the length of the knowledge base and 
n the number of atoms in II. Moreover, for an arbitrary knowledge base II, we can find the 
minimum k such that II belongs to Ok in time linear in the size of II. Intuitively, the more 
the knowledge base is stratified, the more efficient our algorithm becomes. We believe that 
beyond stratified knowledge bases, the more expressive the knowledge base is (i.e. the more 
rules with nonstratified negation in the knowledge base), the less likely it will be needed. 
Hence, our analysis should be quite useful. In addition, we show that algorithm AAS has 
several advantages in a dynamically changing knowledge base, and we provide applications 
for answering queries and implementing a TMS's nogood strategies. We also illustrate a 
generalization of algorithm AAS for the class of first-order knowledge bases. 

Algorithm AAS can easily be adjusted to find only one stable model of a knowledge 
base. While traversing the super dependency graph, we generate only one model at each 
node. If we arrive at a node where we cannot generate a model based on what we have 
computed so far, we backtrack to the most recent node where several models were available 
to choose from and take the next model that was not yet chosen. The worst-case time 
complexity of this algorithm is equal to the worst-case time complexity of the algorithm for 
finding all stable models because we may have to exhaust all possible ways of generating a 
stable model before finding out that a certain knowledge base does not have a stable model 
at all. Nevertheless, we believe that in the average case, finding just one model will be 
easier than finding them all. A similar modification of the AAS algorithm is required if we 
are interested in finding one model in which one particular atom gets the value true. 

This work is another attempt to bridge the gap between the declarative systems (e.g., 
default logic, autoepistemic logic) and the procedural systems (e.g., ATMs, Prolog) of the 
nonmonotonic reasoning community. It is argued that while the declarative methods are 
sound, they are impractical since they are computationally expensive, and while the proce- 
dural methods are more efficient, it is difficult to completely understand their performance 
or to evaluate their correctness. The work presented here illustrates that the declarative 
and the procedural approaches can be combined to yield an efficient yet formally supported 
nonmonotonic system. 
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